Encryption · AES-256-GCM · ML-KEM post-quantum

Online Encryption Tool Cipher in. Cipher out.

If your encryption tool is online and uploads your file to a server, it's not really an encryption tool — it's a courier with extra steps. Morph runs AES-256-GCM via the Web Crypto API plus ML-KEM (Kyber, the NIST post-quantum KEM) directly in your browser tab. Argon2 for key derivation. The plaintext, the ciphertext, and the key never leave your machine. Encrypt files or text, share the cipher, decrypt on the other side. Free for everything that runs on your device; AI is paid in credits.

01
SYMMETRIC

AES-256-GCM via Web Crypto — same primitives every browser ships.

The browser's built-in Web Crypto API handles the AES math. Argon2 derives the key from your passphrase with strong memory-hard parameters — brute force costs scale with hardware spend.

Open the tool
Runs on your device · free · no account

What it actually does

02
PQC

ML-KEM (Kyber)

NIST post-quantum standard for key encapsulation. Hybrid mode pairs ML-KEM with AES so the cipher is hardened against both classical and quantum attackers.

03
FILES

Or text

Drop a file or paste a message. Output is a single self-contained ciphertext.

04
LOCAL

No server

Plaintext, ciphertext, and key all stay on your machine.

How it works

  1. Open morph.cool/encryption. No install, no account, no card.
  2. Pick mode: AES-256-GCM symmetric (passphrase) or ML-KEM hybrid (public key).
  3. Drop a file or paste text. Set passphrase or paste recipient public key.
  4. Encrypt. The output is a self-contained ciphertext file.
  5. Share the ciphertext over any channel. Recipient decrypts in their tab.
256-bitAES key
0Server roundtrips
1Tab

Frequently asked

Will my file upload?

No. Web Crypto + WebAssembly run in your tab.

Post-quantum?

Yes — ML-KEM (Kyber) is the NIST PQC standard.

Open source?

The crypto primitives are: Web Crypto API for AES + Argon2, mlkem-js for ML-KEM. Auditable.

Where's the key stored?

Nowhere persistent. The key derives from your passphrase at encrypt and decrypt time. No keystore, no cloud sync.

Encrypt
Encrypt
Nothing leaves your device · Free for what you make, credits for what we run